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Abstract — Subspace codes and rank-metric codes can be used 
to correct errors and erasures in network, with linear network 
coding. Both types of codes have been extensively studied in the 
past five years. 

Subspace codes were introduced by Koetter and Kschischang 
to correct errors and erasures in networks where topology is 
unknown (the noncoherent case). In this model, the codewords 
are vector subspaces of a fixed ambient space; thus codes for 
this model are collections of such subspaces. In a previous work, 
we have developed a family of subspace codes, based upon the 
Koetter-Kschichang construction, which are efficiently list decod- 
able. Using these codes, we achieved a better decoding radius than 
Koetter-Kschischiang codes at low rates. Herein, we introduce a 
new family of subspace codes based upon a different approach 
which leads to a linear-algebraic list-decoding algorithm. The re- 
sulting error correction radius can be expressed as follows: for 
any integer s, our list-decoder using s + 1 -interpolation poly- 
nomials guarantees successful recovery of the message subspace 
provided the normalized dimension of errors is at most s(l — sR). 
The same list-decoding algorithm can be used to correct erasures 
as well as errors. The size of output list is at most Q s_1 , where Q 
is the size of the field that message symbols are chosen from. 

Rank-metric codes are suitable for error correction in the case 
where the network topology and the underlying network code 
are known (the coherent case). Gabidulin codes are a well-known 
class of algebraic rank-metric codes that meet the Singleton 
bound on the minimum rank metric of a code. In this paper, we 
introduce a folded version of Gabidulin codes analogous to the 
folded Reed-Solomon codes of Guruswami and Rudra along with 
a list-decoding algorithm for such codes. Our list-decoding algo- 
rithm makes it possible to recover the message provided that the 
normalized rank of error is at most 1 — R — e, for any e > 0. 
Notably this achieves the information theoretic bound on the 
decoding radius of a rank-metric code. 

Index Terms — list-decoding, subspace codes, rank-metric 
codes, linearized polynomial, Gabidulin codes 

I. Introduction 

Subspace codes and rank metric codes are two closely related 
family of codes used for reliable communication of messages in 
linear network coding [9] [18]. Network coding, in general, is a 
technique where nodes of the network take several packets and 
combine them together for transmission instead of simply re- 
laying the packets of information they receive [1]. It is known 
that in multicast setting, where one transmitter communicates 
with several receivers in the network simultaneously, linear net- 
work coding, wherein all the operations performed at network 
nodes are linear operations, is sufficient to achieve the individ- 
ual max-flow bound on the rate of communication between the 
transmitter and each of the receivers [10]. 

In random linear network coding, each intermediate node of 
the network creates a random linear combination of the pack- 
ets it receives and sends it through its output links [7]. It is 



proved that random linear network coding is as good as lin- 
ear network coding, in the context of multicast setting, with 
high probability if the size of the field the message symbols are 
chosen from is large enough [8]. Subspace codes have been re- 
cently introduced in order to enable reliable communication of 
messages in random linear network coding [9]. Let the ambi- 
ent space W be a vector space over a finite field ¥ q . A subspace 
code in W is a non-empty subset of all the subspaces of W. 
Koetter-Kschischang algebraic construction of subspace codes, 
originally called Reed-Solomon-like codes in [9], is analo- 
gous to Reed-Solomon codes in classical block codes wherein 
symbols are replaced by vectors, regular polynomials with lin- 
earized polynomials, and sequences of symbols with F 9 -linear 
span of the corresponding vectors. 

In a previous work, we proposed a new family of sub- 
space codes that enables list-decoding, hence achieving a 
better tradeoff between rate and error correction capability 
[12], [13]. The idea was to evaluate all the powers of the lin- 
earized message polynomial, up to some power L, in order to 
list-decode with list size at most L. In a sense our algorithm 
can be regarded as an analogous to Sudan list-decoding al- 
gorithm of Reed-Solomon codes [19]. We further improved 
this result by introducing multiplicity in the ring of linearized 
polynomials [14]. This was motivated by Guruswami-Sudan 
list-decoding algorithm of Reed-Solomon codes [6]. We were 
able to list-decode for a wider range of rates and also to achieve 
a better tradeoff between the rate and decoding radius by 
enforcing multiple roots for the interpolation polynomial [14]. 

In this paper, we introduce a new family of subspace codes 
that allows a simple linear-algebraic list-decoding by using ,s + 
1-variate interpolation polynomials, where s is a design param- 
eter. The entire list-decoding algorithm is linear-algebraic. A 
system of linear equations is solved for the interpolation step 
and another linear system is solved to compute the set of all 
the possible solutions which indeed is a linear space. This is 
motivated by the recent work of Vadhan [20, Ch. 5] and Gu- 
ruswami [4] which suggested a simplified version, with no need 
of multiplicity, of previously proposed list-decoding algorithm 
of folded Reed-Solomon codes by Guruswami and Rudra in [5]. 
The later was built upon the work of Parvaresh and Vardy on 
list-decoding of Reed-Solomon codes by proposing multivari- 
ate interpolation [15]. 

In the coherent system of network coding, the network topol- 
ogy and the particular network coding operations done at inter- 
mediate nodes are known to both the transmitter and the re- 
ceiver. In this setting, rank-metric codes turned out to be the 
suitable tool to deal with possible injected errors into the net- 
work [18]. Each codeword in a rank-metric code is a matrix 
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with fixed dimensions whose entries are taken from a finite field 
F g . The distance between two matrices is simply the rank of 
their difference. Gabidulin codes were introduced as a class of 
MRD (maximum rank distance) codes. They achieve the Sin- 
gleton bound on the minimum rank distance of a rank metric 
code. In this paper, we define a folded version of Gabidulin 
codes. Then we propose a list-decoding algorithm that can cor- 
rect the fraction of errors up to the Singleton bound which is 
the information theoretic upper bound on the error correction 
capability of a code. 

The rest of this paper is organized as follows. We start with a 
brief overview of linearized polynomials, subspace codes, rank- 
metric codes and Gabidulin codes in Section [TT] In Section UTT1 
we first discuss our new construction of subspace codes, then 
we propose a list-decoding algorithm. After that, we establish 
the correctness of the algorithm and provide the decoding ra- 
dius and other parameters of our code. In Section IIVI we in- 
troduce the folded version of Gabidulin codes and provide the 
list-decoding algorithm. Then we show that we are able to cor- 
rect the fraction of errors up to 1 — R, R being the rate of the 
code, hence achieving the Singleton upper bound on the error 
correction capability of rank-metric codes. 

II. Background and Prior Work 

In this section, we first explain the ring of linearized poly- 
nomials. We establish some relevant terminology for subspace 
codes and explain the Koetter-Kschischang construction of 
subspace codes. Then we briefly recap the results of [12] and 
[13] which provide a new construction of subspace codes. 
In [12] and [13] we suitably modified and extended Koetter- 
Kschischang construction in many important respects in order 
to enable list-decoding. Then we briefly discuss the results of 
the follow-up work in [14] wherein we introduced multiple 
roots for the interpolation polynomial. At the end, we briefly 
review rank-metric codes and Gabidulin codes as a class of 
maximum rank distance codes. 



A polynomial over some extension field ¥ q n 
linearized if it has the following form: 



of F„ is called 



i=0 

where a, G F q m, for i — 0, 1, . . . , s. Assuming that a s ^ 
we say that the polynomial f(X) has ^-degree s which means 
that its actual degree is q s . When q is fixed under discussion, 
we will let X^ denote X q . The main property of linearized 
polynomials from which they receive their name is that they act 
as linear maps with respect to ¥ q . The set of linearized poly- 
nomials forms a non-commutative ring under addition + and 
composition operation <X>. For any two linearized polynomials 
fi(X) and f2(X), the composition operation fi(X) <g) fi{X) 
is defined to be the composition fi(f2(X)) which is always a 
linearized polynomial. The ring of linearized polynomials over 
W q m is denoted by J? qm [X]. 

A. Subspace Codes 

Let W be a fixed iV-dimensional vector space over ¥ q and 
Q (W) denote the set of all subspaces of W. For any V S Q (W), 



the dimension of V is denoted by dim(V). For any A, B 6 
Q(W), the distance between A and B is defined as follows: 



d(A, B) d ^ f 



dim(A + B)- dim(A n B) 



Q(W) is indeed a metric space under this metric. Let Q(W, n) 
denote the set of all ?i-dimensional subspaces of W. A code C in 
the ambient space W is a non-empty subset of Q(W). A code- 
word is an element of C which is in fact a subspace of W. 
Definition. [9] Let C be a code associated with the ambient 
space W of dimension N over ¥ q . Suppose that the dimension 
of any V G C is at most n. Then the rate of the code R is defined 
as follows. 

dcf iogje| 
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nN 



(1) 



In [14], we defined a new parameter, called the packet rate of 
the code. The packet rate R* is defined as follows: 



R* d — 



\og qm \C\ logJC| 



nm 



(2) 



where q m is the size of the underlying extension field. □ 

Koetter-Kschischang construction [9] of subspace codes can 
be regarded as an analogous to Reed-Solomon codes wherein 
symbols are replaced by vectors, polynomials with linearized 
polynomials and sequences of symbols with F g -linear span of 
the corresponding vectors. Fix m and an extension field ¥ q ™ of 
¥ q . ¥ q m can be also regarded as a vector space of dimension m 
over F g . Fix a set A = {a±, . . . , a n } of n linearly independent 
vectors in ¥ q ™. Let u = (ito, . . . , u^-x) be the message vec- 
tor and f u (X) — Yli=o UiX^ be the corresponding linearized 
message polynomial. Then the corresponding codeword V is 
the F 9 -linear span of the set {{a i: /(c^)) : 1 ^ i ^ n) which is 
an n-dimensional vector space. The ambient space W is equal 
to (A) © F™ which is an (n + m)-dimensional vector space 
over Fg. The codewords of Koetter-Kschischang code, which 
we simply call KK code, are in fact n dimensional subspaces 
of the ambient space W. Each element of W is represented as 
a vector (x, y) where x belongs to the span of a,'s and y is an 
element of ¥ q m . 

At the decoder, a nonzero bivariate linearized polynomial 
Q(X,Y) of the form 

Q(X,Y) = Q (X) + Qt(Y), 

is constructed, where Qq and Qi are subject to some degree 
constraints such that Q(xi,yi) = for all the basis elements 
of the received subspace. Then the equation Q(X, f(X)) = 
is solved to recover the message polynomial. It is proved in [9] 
that if not too many errors and erasures happen, then f u (X) is 
the unique solution to this equation. Koetter and Kschischang 
give the normalized decoding radius of this scheme as 



1 



1 



1 



1 



1 



n \ 
-)R 



l-R* (3) 



The main obstacle in the list-decoding of KK codes is that the 
ring of linearized polynomials is non-commutative. Because of 
that, an equation of certain degree over the ring of linearized 
polynomials may have exponentially many roots, while one has 
to guarantee a bounded list-size at the output of the decoder. 
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In order to enable list-decoding, we modified the KK construc- 
tion in many important ways. Our work in [12] and [13] basi- 
cally leads to a new construction of subspace codes which is 
list-decodable. 

Next, we turn to describe the encoding and decoding of this 
construction of subspace codes [12], [13]. Recall from [11, Ch. 
4.9] that any finite extension ¥ q i of ¥ q contains a primitive ele- 
ment 7 such that 7, j q , . . . , -f q forms a basis for F g i as a vec- 
tor space over F g . This is called a normal basis for ¥ q i . Fix a fi- 
nite field F g and let n divides q—1. Then the equation x n — 1 = 
has n distinct solutions in F g . Let ei = 1, e^, e^, . . . , e n be these 
solutions. Let F = GF(q nm ) and 7 be a generator of a normal 
basis for F. Then define 



7 + e i V'" + e l V 



-(n-l) „< 



(4) 



for i — 1,2, ... ,n. For a given message polynomial f u (X), our 
encoder constructs the vectors Wj's as follows: 

v i = {a i ,f u {a i )Jf\a i ),...Jf L {a i )) 

for i — 1,2, ... ,n. Then it outputs the n-dimensional vec- 
tor space spanned by vi,V2, ■ ■ ■ ,v n . In this construction, the 
ambient space W has dimension equal to n + nmL and each 
element in W is represented as a vector with L + 1 coordinates 
such as (x, 2/1, 2/2> • • • j Vl), where x belongs to the vector space 
spanned by a.\, a^, ■ ■ ■ , ot n and yi £ F ? »m, for i = 1,2, . . . , L. 
The decoding algorithm consists of three steps. In the first step, 
it computes the interpolation points. In the second step, a mul- 
tivariate linearized polynomial Q(X, Y\, Y2, . . . ,Yl) of the 
form 

Q (X) + Q 1 (Y 1 ) + Q 2 (Y 2 ) + ■■■ + Q L (Y L ) 

is constructed, where each Qi is subject to a degree constraint, 
such that Q(x,yi,y2, ■ ■ ■ = for all the interpolation 

points (x, 2/1, t/2, . . . , y£)- Then in the factorization step, we 
compute all the roots f(X) 6 5£ q \X\, with degree at most 
k — 1, of the equation: 

Q(X,f(X),...,f® L (X)) =0 

To solve this equation efficiently, we propose a linearized 
version of Roth-Ruckenstein algorithm which was designed 
to solve equations over the ring of polynomials [17]. We 
also show in [13] that there are at most L solutions for 
f(X) e ££ q \X\. Each solution corresponds to one possible 
output message. 

We prove in [13] that the normalized decoding radius of this 
list-decoding algorithm in terms of list size L and packet rate 
R* is given by 

L-^L(L + 1)R* (5) 

We further improve this result by introducing multiplicities 
for the interpolation polynomial in [14]. First, we establish the 
notion of multiplicity for linearized polynomials in this context. 
Then by enforcing multiple roots for the interpolation polyno- 
mial we achieve a better decoding radius. We are also able to 
list-decode at higher rates. For every positive integers L and c, 



our list-Z/ decoder with multiplicity c guarantees successful re- 
covery of the message subspace provided that the normalized 
dimension of the error is at most 

2(L+1) L(L + 1) 



1 



1 



-R* 



c(c + l) 

This improves the normalized decoding radius upon the previ- 
ous results, given in OJ and (0, for a wide range of rates. The 
parameter c is independent of the code construction and can be 
chosen at the decoder in such a way that the decoding radius is 
maximized. As L tends to infinity, the decoding radius of our 
construction with appropriate choice of c approaches — 1. 

B. Rank-Metric Codes 

Rank-metric codes are suitable for the coherent system of 
network coding, where the network topology and the underly- 
ing network code are known to both the transmitter and the re- 
ceiver [18]. In [18], Silva et al. also show that subspace codes 
and rank-metric are closely related. Indeed, there is an injec- 
tive mapping between rank-metric codes and subspace codes 
through a lifting operation. 

Let F g ixm denote the set of all n x m matrices over F g . For 
any X € F™ x "\ let (X) denote the row space of the matrix X. 
A rank-metric code is just a subset of F™ xm which is called 
an array code in [16]. The distance between X,Y e F" xm is 
defined as rank(X — Y). We define the rate R of a rank-metric 



code C C F" xm as follows: 



R 



def 



log,(|C| 



The minimum (rank) distance of C is the minimum distance 
between distinct elements of C. The Singleton bound is es- 
tablished in the context of rank-metric codes by Gabidulin in 
[3]. It states that the minimum distance of a code C with rate 
R, normalized by the number of rows n, is at most 1 — R, A 
rank-metric code that meets the Singleton bound on the mini- 
mum distance is called a maximum rank distance (MRD) code. 
Gabidulin codes are a class of MRD codes proposed in [3]. 

A Gabidulin code in F" xm is indeed a linear (n, k) code over 
F 9 m whose generator matrix G has the following form: 



Jfc-i] Jfc-i] 



v [0] 

„[i] 



where the elements a±, a 2 , ■ ■ ■ , a n £ F g ™ are linearly inde- 
pendent over F g . Each codeword is a column vector of length 
n over F ?m which can be also regarded as a matrix in ¥ q ixm . 
Note that the condition n ^ m is required. The rate of the code 
is R = £ The minimum rank distance of a Gabidulin code is 

n 

d = n — k + 1 which satisfies the Singleton bound in the rank 
metric [3]. The minimum rank distance can be normalized to 
1 — R. The unique decoding radius bound then becomes equal 
to (1 — R)/2. A decoding algorithm which can correct errors, 
as long as the rank of error is less than (d — l)/2, is proposed in 
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[3], hence achieving the bound (1 — R)/2 on unique decoding 
radius. 

Suppose that the input to the Gabidulin encoder is a message 
vector u = [u u\ . . . Uk-i] which consists of k message sym- 
bols in F qm . Let f u {X) denote the corresponding linearized 
message polynomial J2i=o u iX^- Then the corresponding 
codeword V = (uG) T is indeed equal to 

[/«(ai)/«(a2) ••• fu{a n )] T 

which can be also regarded as a matrix in ¥ q ixm . 

Now, the close relation between Koetter-Kschischang con- 
struction of subspace codes and Gabidulin codes becomes 
clear. Intuitively KK codes can be thought as a modification of 
Gabidulin codes where there is no ordering for the coordinates 
/»(Q!i)'s. Each a.i is appended to the corresponding /«(a»), as 
a vector in n-dimensional vector space spanned by all a»'s, in 
order to keep track of evaluation points of the linearized poly- 
nomial f u (X). More rigorously, the lifting mapping, defined in 
[18], translates Gabidulin codes into KK codes. 



III. New Subspace Codes and Algebraic 
List-decoding Thereof 

In this section, we present a new construction of subspace 
codes and a list-decoding algorithm capable of correcting both 
errors and erasures. Our results in this section are motivated by 
the recent work of Vadhan [20, Ch. p] and Guruswami [4] . Then 
we establish the correctness of our algorithm and compute the 
error correction capability of the proposed construction. 

A. Code Construction and List-decoding Algorithm 

The following parameters of the construction are fixed: the 
finite field F g and an extension ¥ q m, the number of informa- 
tion symbols k, the dimension of code n and the parameter s 
which is related to the list size. We require that k ^ n ^ m. A 
set A — {a\,a 2 , . . . , a n } of linearly independent elements of 
¥ q m is also fixed. In this construction, the ambient space W is 
an n + sm-dimensional vector space over ¥ q . Let 7 be an ele- 
ment of ¥ q m which is not contained in any subfield of ¥ q ™ i.e. 
7, 7 9 , . . . , -f q are all distinct. 
Encoding Algorithm: 

Formally, the encoder is a function £ : ¥* m — > Q{W, n). It ac- 
cepts as input a message u = (u , u\, . . . , Uk-i) G ¥^ m . The 
corresponding message polynomial is f u (X) — Y^lZo u iX^. 
Then the corresponding codeword V is the F g -linear span of the 
set {(a i ,/(a i ),/(7a i ),. . . , /(7 S ~V)) : % € M}. 

Notice that, KK code is a special case of this for s = 1. 
Since a,'s are linearly independent, each codeword is an 
n-dimensional vector space which is a subspace of 



W 



(ai,a 2 ,...,a„) ©F 9 



>¥ n 



(6) 



The dimension of W is equal to n + sm, as mentioned before. 
Each vector in W is represented as a vector with s + 1 coor- 
dinates such as (x, 2/1, . . . , y s ), where x is an element of the 
vector space spanned by a 1 ,a 2 ,...,a„ and all y/s belong to 

F„m. 



Now, we turn to explain the list-decoding algorithm. Suppose 
that V is transmitted and a subspace U of W of dimension r is 
received. We need another parameter d at the decoder which is 
computed as follows: 

~r + s(k - 1) + 1 



d 



8 + 1 



(7) 



As we will see, d is chosen in such a way that existence of the 
interpolation polynomial is guaranteed at the decoder. 
List-decoding Algorithm: 

The decoder accepts as input a vector space U which is a sub- 
space of W. It then outputs a list of size at most g m ( s_1 ) of 
vectors in ¥ qm in three steps: 

1) Computing the interpolation points: 

Find a basis (x i ,y lA ,y l . 2 , ■ . ■ 7 yi, s ),i = 1,2, ...,r, for 
U. This is the set of interpolation points. 

2) Interpolation: Construct a nonzero multivariate lin- 
earized polynomial Q(X, Y\, Y 2 , . . . , Y s ) of the form 

Q(X, Y) = Q (X) + Qi(y) + Q 2 {Y 2 ) + ■■■ + Q S (Y S ) 

where Qj's are linearized polynomials over ¥ q ™, Q has 
g-degree at most d — 1 and Qi has g-degree at most d — k, 
for i — 1,2, ... ,s, subject to the constraint that 

Q(xi,Vi,i,yi,2,---,yi, s ) =0forz = 1,2, ...,r (8) 

3) Message recovery: Find all polynomials f(X) G 
J£ q m[X] of degree at most k — 1 that satisfy the 
following equation 

Q(X, /( 7 X), f( 7 2 X), /(7 S - 1 ^))= 

The decoder outputs coefficients of each solution f(X) 

as a vector of length k. 
The first step of this list-decoding algorithm can be done us- 
ing elementary linear algebraic operations. The second step is 
basically solving a linear system of equations. There are sev- 
eral ways for doing that. The most straightforward way is the 
Gaussian elimination method. However, this method does not 
take advantage of the certain structure of this system of equa- 
tions and therefore, it is not efficient. Efficient interpolation al- 
gorithms in the ring of linearized polynomials are presented in 
[21]. In this case, the complexity of corresponding interpolation 
algorithm is given as 0(n 2 s 3 ) field operations over ¥ q m. The 
parameter s is in fact a design parameter and can be regarded as 
a constant. Indeed, the interpolation step is quadratic in terms 
of n. In the next subsection, we explain how the message recov- 
ery step can be done using a linear algebraic method. The com- 
plexity of the message recovery step is also quadratic. Hence, 
the total complexity of our algorithm is quadratic in terms of n, 
the dimension of the code. 



B. Recovering the Message Polynomial 

As discussed in the foregoing section, in the last step of the 
list-decoding algorithm we need to find all polynomials f(X) G 
Jzfqm [X] of degree at most k — 1 that satisfy 

Qo(X) + Q 1 (f(X))+Q 2 (f( 7 X)) + - ■ ■ + Q s (f( 1 s - 1 X)) = 

(9) 
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Remark. Suppose that f,g E J2f gm [X] are two solutions to 
the equation Since Q^'s are linearized polynomials, for any 
a E F g , a/ + (1 — a)g is also a solution to (|9]). Therefore, the 
set of solutions, which can be regarded as vectors of length k 
over F g m, forms an affine subspace of F^ m as a vector space 
overF,. □ 

In the next lemma, we establish an upperbound on the num- 
ber of solutions to ((9). The proof of lemma also clarifies how 
the affine space of solutions can be computed with quadratic 
complexity. 

Lemma 1. The dimension of the affine space of solutions 
f{X) £ Jz? 9m [X], of degree at most k - 1, to © is at most 
m(s — 1). 

Proof. Fori = 0, 1, 2, . . . , s, let 

Q, : .\ : ^ </- ..- V 

If Qi.o = for i = 0, 1, 2, . . . , s, then we replace Qi with Q' i7 
where Qi(X) — Q'^X 11 ), in (O and the space of solutions re- 
mains unchanged. Therefore, one can assume that at least one 
qi* A is non-zero for some i* E {0, 1, 2, ... , s}. Furthermore, 
if q± o, g2,0) • • • i Qs,o are zero, then so is go,o, otherwise 
there is no solution to (0. Thus, we can take i* from the set 
{l,2,...,s}. 

Let us define the linearized polynomial P(X) as 

s 

p(X) = Qo(x) + J2Qi(f(i i - 1 x)) 

i=l 

and the polynomial A(X) as 

A(X) = q h0 + q 2fl X + ■■■ + qsfiX 3 - 1 

Then the coefficient of X q ' in P(X), for i = 0, 1, . . . , k — 1, is 
equal to 

qo,i + Ui{qx >0 + q2,ol qZ H h<7^o7 (s " 1)9! ) 

+ ujL^gi.i +g 2 ,i7 9 ' + --- + 9 s ,i7 ( ^ 1)9 ') 
+ •••+«§' + ^iT 9 * + • • • + g s ,,:7 ( ^ 1)9 ') 
which can be simply expressed as 

i-l 

9o ,i + A( 7 9< K + X>? )u r' (10) 
i=o 

for some elements E ¥ q ™ . Now, suppose we want to find 
all possible solutions for f(X) in ((9). Then all the coefficients 
of P(X) have to be equal to zero. In particular, for the coeffi- 
cient of XinP(X): 

A(~f)u + q ,o = 

If A(j) is non-zero, then uq = — ^f^y ■ If A(j) is zero but go,o 
is not zero, then there is no solution for uq and consequently 
for f(X). If both A(7) and go.o are zero, then we can set uq 
to any element of F g ™. Then we find the solutions to u^'s it- 
eratively. For each i, suppose that uq, U\, . . . , u^-i are already 
computed. If A(j q ) is non-zero, then Ui can be uniquely de- 
termined by (TlOl i. Otherwise, we take all the elements of F g ™ 



as possible solutions to and keep going for each of them 
separately. Notice that A(X) is a non-zero polynomial of de- 
gree s — 1 and 7, 7 9 , . . . , 7 9 are all distinct elements of F ?m . 
Therefore, A(j q ) is equal to zero for at most s — 1 possible 
values of i. This implies that the total number of solutions for 
f(X) to (0 is at most q m ( s_1 ) which proves the lemma. ■ 

Corollary 2. The affine space of solutions to ® can be com- 
puted with quadratic complexity in terms of dimension n. 

C. Correctness of the Algorithm and Code Parameters 

In this subsection, we first establish the correctness of our 
list-decoding algorithm. Then we compute the corresponding 
decoding radius. 

Lemma 3. The particular choice of d in © guarantees exis- 
tence of a non-zero solution for interpolation polynomial Q that 
satisfies ©. 

Proof. ^ defines a homogeneous system of r linear equa- 
tions. The number of unknown coefficients is equal to 

d+ (d - k + l)s = d(s + 1) - s(k - 1) 

A non-zero solution for this homogeneous system of linear 
equations is guaranteed if the number of equations is strictly 
less than the number of variables, i.e. 

r ^ d(s + 1) - s(k - 1) - 1 
r + ,(*-l) + l 
s+1 

This is guaranteed by the choice of d in ©. ■ 

We form the following linearized polynomial E(X) wherein 
fu{X) is the message polynomial and Q(X, Yt, . . . , Yl) is 
the interpolation polynomial provided by the list-decoding 
algorithm. 

E(X) = Q(X, f u (X)J u ^X), . . . , f u {l s - l X)) 

s 

= Q (x) + Y / Q t ®fu(f~ 1 x) 

Let p and t denote the number of erasures and errors in the re- 
ceived subspace U, respectively. Hence, the dimension of U is 
in fact equal to r = n — p + t. 

Lemma 4. The linearized polynomial E(X) has at least n — p 
linearly independent roots in F g ™ . 

Proof Let U' denote the intersection of the transmitted code- 
word V and the received subspace U. Then U' is a subspace of 
the received vector space U with dimension n — p. Since Q is a 
linearized polynomial 

Q(x,yi, ...,y s ) = 

for any (x,yi, . . . , y s ) E U' . On the other hand, (x, y\ , . . . , y s ) 
is also an element of the transmitted codeword V. Therefore, 

(x, Vl ,..., y s ) = (13, /„(/?),/„ ( 7 /3), • ■ • , Ul 3 - 1 ?)) 

for some (3 in the linear span of <x\, 012, ■ ■ ■ , oc n . Therefore, (3 is 
a root for the polynomial E(X). Hence, there are at least n — p 
linearly independent roots for E(X). ■ 
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Corollary 5. If d ^ n — p, then the linearized polynomial E(X) 
is identically zero. 

Proof. The g-degree of f u {X) is at most k — 1. Therefore, the 
q-degree of Qi (g> f u { r y t ~ 1 X) is at most 



d-k 



1 



1 



for i = 1, . . . , L. Also, the q-degree of Qo(^) is at most d—1. 
Thus the q-degree of E(X) is at most d—1. On the other hand, 
E(X) has at least n — p linearly independent roots by Lemma|4] 
Therefore, E(X) must be the all zero polynomial. ■ 

Theorem 6. The output of our list-decoding algorithm is a list 
of size at most q" 1 ^^ 1 ^ which includes the transmitted message 
u provided that 



sp + t < ns — s(k — 1) 



(11) 



Proof. The existence of non-zero interpolation polynomial Q 
that satisfies © is guaranteed by Lemma|3] Then by Corolla- 
ry[5] E(X) is the all zero polynomial provided that 



r + s(k - 1) + 1 



1 



< (n - p) 



(12) 



where we have used the expression for d from (0. We plug in 
r = n — p + 1 into ( fT2l . Then observe that ( TT2b is in fact equiv- 
alent to 

sp + t < ns — s(k — 1) 

Thus this condition on the number of errors and erasures im- 
plies that E(X) is identically zero. Therefore, the message 
polynomial is a solution to (O. There are at most 
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m(s- 



l > solutions to (O by LemmaQ] Therefore, the list size is 



m(s-l) 



at most q 

Now, we turn to the parameters of the proposed construc- 
tion. The ambient space W is given in © which has dimension 
equal to n + sm. The symbol rate R and the packet rate R* of 
the code can be computed as defined in (QJ and (0: 



R 



R* = 



km 



log g (size of the code) 

n(dim(W)) n(n + sm) 

log ?m (size of the code) fc 

n n 



The normalized decoding radius, in which erasures have weight 
s, is given by Theorem|6]as 



s(k - 1) 



(13) 



s 2 (l + — )R 
ms 



In the regime where n is much smaller than ms, the error de- 
coding radius can be approximated as s — s 2 R. 

The normalized decoding radius in terms of the packet rate 
R* can be approximated as s(l — R*). It implies that, for any 
packet rate R*, we basically achieve any decoding radius by 
letting the list size to be large enough. 



IV. List-decoding of Gabidulin Codes 

In this section, we first introduce a folded version of 
Gabidulin codes. Then, we propose a list-decoding algo- 
rithm which provides decoding radius up to the Singleton 
bound 1 — R, the best possible trade-off between the rate and 
error-correction radius. 

Let 7 be a primitive element of F g m. Let C denote the 
Gabidulin code constructed with parameters on — j^^ 1 ^ as 
discussed in Section III-BI Let also h be a positive integer that 
divides n and let g = n/h. 
Definition. (Folded Gabidulin Code) 

The /i-folded version of Gabidulin code C is a code whose code- 
words are elements of F| x ' im . The encoding of a message poly- 
nomial f u (X) of q-degree at most fc — 1 has as its i-th row, for 
< i < g, the /i-tuple (f u (^ h ), f u (Y h+1 ), /«(7 (<+1)h ~ 1 )). 
which can be regarded as an element in F^ m . □ 

Notice that folding does not change the rate. The rate of 
folded version of code C is equal to the rate of C which is equal 

to k/n. 

Before going into the details of list-decoding algorithm, we 
would like to clarify the difference between the notion of "er- 
ror" in subspace codes and rank-metric codes. Suppose that a 
codeword X in code C is transmitted and a word Y with t errors 
is received i.e. rank(X — Y) = t. Now consider (X) and (Y) in 
the context of subspace codes. Then (Y) is corrupted with t er- 
rors and t erasures with respect to (X). In fact, in rank-metric 
codes, there is no notion of "erasure" and each error is corre- 
sponding to one error and one erasure in the context of subspace 
codes. 

For ^ i ^ g and ^ j ^ m, let yij £ ¥gm denote the 
(i, j )-th coordinate of received word Y regarded as a matrix in 
Fgm" 1 . Let s be a positive integer less than or equal to h. We 
propose a decoding algorithm based on interpolating an s + 1- 
variate linearized polynomial Q(X, Y\, . . . , Y s ). The q-degree 
of Q is characterized in terms of parameter d which is set as 
follows: 



g{h-s + l) + s{k-l) + \ 



1 



(14) 



This particular choice of d will guarantee existence of the inter- 
polation polynomial. 

List-decoding algorithm of folded Gabidulin codes 

1) Interpolation: Construct a nonzero multivariate lin- 
earized polynomial Q(X, Yj., Yjj, . . . , Y s ) of the form 

Q(X,Y) = Q (X) + Qx{Y) + Q 2 (Y 2 ) + ■■■ + Q S (Y S ) 

where Q/s are linearized polynomials over F g m, Q has 
q-degree at most d—1 and the g-degree of all other Q/s 
is at most d — k subject to the constraint that 

Q(y ih+j ,yi,j,yi,j+i,---,yid+s-i) = o (15) 

for i = 0, 1, . . . ,g — 1 and j = 0, 1, . . . , h — s. 

2) Message recovery: Find all the solutions ,f(X) G 
_Sf g m [X] to the following equation: 

Q(X, f( 7 X), /( 7 2 X), . . . , fiY^X))^ (16) 
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The decoder outputs coefficients of each solution f(X) 
as a vector of length k. 

The interpolation step is very similar to the interpolation step 
of the list-decoding algorithm discussed in Section lTlI-AI It can 
be done using either the straightforward Gaussian elimination 
method or an efficient interpolation algorithm in the ring of lin- 
earized polynomials as presented in [21], similar to the algo- 
rithm in Section UlI-AI The message recovery step is exactly 
similar to that of list-decoding algorithm in Section IIII-AI It 
can be also done as discussed in Section ITH-BI The total com- 
plexity of our list-decoding algorithm is then quadratic in terms 
of dimension n. 

Next, we establish correctness of the proposed list-decoding 
algorithm and compute the decoding radius of the code. 

Lemma 7. The particular choice of d in (fl4l ) guarantees exis- 
tence of a non-zero solution for interpolation polynomial Q that 
satisfies (fl31 ). 

Proof. £B) is in fact a homogeneous system of g(h — s + 1) 
linear equations. The number of unknown coefficients is given 
by 

d + (d - k + l)s = d{s + 1) - s(k - 1) 

If the number of equations is strictly less than the number of 
variables in a homogeneous system of linear equations, then a 
non-zero solution is guaranteed to exist . i.e. 

g(h - s + 1) < d(s + 1) - s(k - 1) - 1 

g(h-s + l) + s(k-l) + l 



d > 



s + 1 



This is guaranteed by the choice of d in (fl4] i. ■ 

Let U € F| x ' im denote the codeword corresponding to the 
message polynomial f u (X). Then (IT) n (Y), the intersection of 
the row spaces of matrices II and Y, has dimension g — t, where 
t is the rank of error. We also define the linearized polynomial 
E(X) as follows: 

E(X) = Q(X, f u (X), f u ( 7 X), U^X)) 

s 

= Qo(x) + Y / Q l ®.fu(f~ 1 x) 

i=l 

Lemma 8. There are at least (g — t)(h — s + 1) linearly inde- 
pendent roots in F q ™ for the linearized polynomial E(X). 

Proof. Notice that any element in the row space of U can be 
represented as 

((/«(/3), fuhP),.-.Juh h - 1 P)) 

for some (3 G W q m. Now consider a basis for (IT) H (Y). Indeed, 
the basis can be represented as 

{{{hmjudPi),.--,^- 1 ^)) ■ i = 1,2,..., n-t} 

where (3i, . . . ,f3 g -t are g — t linearly independent elements 
of ¥ q m . In fact, they are taken from the subspace spanned by 
l,7 ft , . . . , ^W -1 ). Then linearity of the interpolation Q and 
dT3J together imply that 



for i = 1,2, . . . , g — t and j = 0, 1, . . . , h — s. It is indeed 
equivalent to 7 J /3j being a root for E(X). We claim that 7 J /3j, 
for i = 1, 2, . . . , g — t and j = 0, 1, . . . , h — s are all lin- 
early independent elements of W q ™ . Let Vj denote the subspace 
spanned by ^ ,^ +h , . . . , . Since 1,7,..., 7™ _1 are 

all linearly independent, Vj's are all disjoint. Also, ^ Pi, for 
i = 1, 2, ... ,g — t, are g — t linearly independent elements 
of Vj. This completes the proof of claim. Therefore, 7 J /3j, for 
i = 1,2,..., g — t and j = 0, 1, . . . , h— s, are (g — t)(h — s + 1) 
linearly independent roots for E(X). ■ 

Corollary9. If d ^ (g-t)(h- s + l), thenE(X) is identically 
equal to zero. 

Proof. The proof is very similar to the proof of Corollary|5] 
The g-degree of E(X) is at most d — 1 by the same argument. 
E(X) has at least (g — t)(h — s + 1) linearly independent roots 
by Lemma[8] Thus, E(X) must be the all zero polynomial. ■ 

Theorem 10. If the number of errors, t, is bounded as 

gs h 



t < 



1 



-R) 



(17) 



s + 1 v ~ h — s + 1 
Then the proposed list-decoding algorithm of folded Gabidulin 
codes is correct i.e. it outputs a list of size at most q m ( s_1 ) 
which includes the transmitted message u. 

Proof. The interpolation polynomial Q that satisfies Sl5[ is 
guaranteed to exist by Lemma|7] If 

~g(h-s + l) + s(k-l) + r 



s + 1 



<(j-t)(ft-s + l) (18) 



then by Corollary|9] and using the expression for d from ( IT4| ). 
E(X) is the all zero polynomial. ( [T8| > is equivalent to 

g(h - s + 1) + s(k -l)<(g- t)(h - s + l)(s + 1) 

which can be simplified to dTTb by using the approximation 

R, k -1 ^ 

n 

Therefore, the message polynomial f u (X) is a solution to ( fToT ). 
There are at most g m ( 5_1 ) solutions to ( fToT ) by Lemma[T] There- 
fore, the list size is at most (j m ( s_1 ) . ■ 

Corollary 11. The normalized decoding radius of folded 
Gabidulin code using the proposed list-decoding algorithm is 
equal to 



'1 - 



-R) 



,s + l v ~ h -s + 1 
If we let both s and h grow large while s is much smaller that 
h, we get decoding radius arbitrary close to 1 — R. Notice that 
1 — R is indeed equal to the normalized minimum rank distance 
of the code. This means that we are able to achieve the ulti- 
mate error-correction radius for rank-metric codes. This result 
is stated in the following theorem. 

Theorem 12. For every e > and < R < 1, there is a family 
of folded Gabidulin codes with rate R that can be list-decoded 
up to normalized number of errors 1 — R — e. The size of out- 
put list is at most Q ^ 1 /^ , where Q is the size of the field that 
message symbols are chosen from. 

Proof. Given R and e, we can apply the results of TheoremfTOl 
and CorollarvfTTIwith the choice s = l/2e and h — l/4e 2 . ■ 
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